[deps] upgrade github.com/xuri/excelize/v2 v2.10.1 => v2.11.0

[capcom6]

Summary by CodeRabbit

• Chores
  • Updated the minimum Go version for building from source to 1.26.
  • Updated libraries used by the application.

[github-actions]

🤖 Pull request artifacts

Platform	File
🐳 Docker	GitHub Container Registry
🍎 Darwin arm64	smsgate_Darwin_arm64.tar.gz
🍎 Darwin x86_64	smsgate_Darwin_x86_64.tar.gz
🐧 Linux arm64	smsgate_Linux_arm64.tar.gz
🐧 Linux i386	smsgate_Linux_i386.tar.gz
🐧 Linux x86_64	smsgate_Linux_x86_64.tar.gz
🪟 Windows arm64	smsgate_Windows_arm64.zip
🪟 Windows i386	smsgate_Windows_i386.zip
🪟 Windows x86_64	smsgate_Windows_x86_64.zip

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: dae7ecc6-104f-4ad5-aa39-fa2680f7167c

📥 Commits

Reviewing files that changed from the base of the PR and between 5554e77 and 890107b.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (3)

• Dockerfile
• README.md
• go.mod

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The project now uses Go 1.26 in its module declaration, Docker build image, and source-build prerequisite. The module also updates selected direct and indirect dependencies.

Changes

Go toolchain and dependency updates

Layer / File(s)	Summary
Go version and dependency alignment go.mod, Dockerfile, README.md	The module declares Go 1.26 and updates selected dependency versions. The Docker build image and documented source-build prerequisite also change to Go 1.26.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 89010

The Go version requirements are aligned, and the reported spreadsheet-reading panic does not occur on the CLI’s streaming path. No actionable issue identified here prevents merging after normal checks.

Security Architecture Review

Security architecture risk: 🔵 Low · up to 89010

The inspected workbook-reading path does not support the reported panic, and the application’s input routing is unchanged. However, incomplete comparison of dependency behavior prevents a minimal-risk assessment.

Retained concerns
No architecture-level concerns identified.

Security review details

Security Blast Radius

• inferred — The supported exposure is the batch CLI process parsing a supplied workbook. Input control requires influencing the file that the operator selects; broader service or tenant exposure is not established by this trace.

Security Findings and Attack Paths

• observed — The reported checkRow panic is not verified. Inspected v2.11.0 File.Rows and Rows.Columns consume worksheet XML through the streaming path rather than invoking checkRow. The deferred candidate is therefore not an established PR regression; exact base-version comparison remains incomplete.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately identifies the direct upgrade of github.com/xuri/excelize/v2 from v2.10.1 to v2.11.0, which is a primary change in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}